Attorney Docket No: 1403-3 (OPP20060845 US) 
AMENDMENTS TO THE CLAIMS 



Please amend the claims as follows: 
1-24. (Cancelled) 

25. (Currently Amended) A method of requesting an authentication to a base station 
in a subscriber station, the method comprising: 

transmitting a subscriber station basic capability negotiation request (SBC- REQ) 
message to the base station to s e l e ct an auth e ntication mod e , the SBC-REO message 
including information on at least one authentication mode than can be supported by the 
subscriber station : 

receiving a subscriber station basic capability negotiation response (SBC-RSP) 
message including information on an authentication mode that is selected by the base station 
among the at least one authentication mode : and 

transmitting an authentication request message corresponding to the selected 
authentication mode to the base station. 

26. (Previously Presented) The method of claim 25, wherein each of the SBC-REQ 
message and the SBC-RSP message includes a parameter for selecting the authentication 
mode. 

27. (Previously Presented) The method of claim 25, wherein the selected 
authentication mode includes at least one of a digital certificate based authentication mode 
and an extensible authentication protocol (EAP) based authentication mode. 

28. (Previously Presented) The method of claim 25, wherein, when the selected 
authentication mode is a digital certificate based authentication mode, the authentication 
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request message is a message for requesting the authentication by the base station. 

29. (Previously Presented) The method of claim 25, wherein, when the selected 
authentication mode is a digital certificate based authentication mode, the authentication 
request message includes an authentication information message and an authorization request 
message. 

30. (Previously Presented) The method of claim 25, wherein, when the selected 
authentication mode is an EAP-based authentication mode, the authentication request 
message is a message for requesting the authentication by an authentication, authorization, 
and accounting (AAA) server, 

wherein the AAA server is connected to the base station and performs the 
authentication. 

3 1 . (Previously Presented) The method of claim 25, wherein, when the selected 
authentication mode is an EAP-based authentication mode, the authentication request 
message includes an EAP payload, 

wherein the EAP payload includes data for the authentication. 

32. (Previously Presented) The method of claim 25, wherein the authentication 
request message is a privacy key management request (PKM-REQ) message included in a 
medium access control (MAC) message. 

33. (Currently Amended) A method of performing an authentication on a subscriber 
station in a base station, the method comprising: 

receiving a subscriber station basic capability negotiation request (SBC-REQ) 
message for s e l e cting an authentication mod e from the subscriber station , the SBC-REQ 
message including information on at least one authentication mode that can be supported by 
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the subscriber station ; 

selecting an authentication mode from among the at least one authentication mode: 

transmitting a first response message to the subscriber station, the first response 
message including information on the selected authentication mode s e l e ct e d in accordanc e 
with the SBC REQ me s sage ; 

receiving an authentication request message corresponding to the selected 
authentication mode from the subscriber station; and 

transmitting a second response message to the subscriber station, the second 
response message representing a result of the authentication performed in accordance with 
the authentication request message. 

34. (Previously Presented) The method of claim 33, wherein the authentication mode 
includes at least one of a digital certificate based authentication mode and an extensible 
authentication protocol (EAP) based authentication mode. 

35. (Previously Presented) The method of claim 33, wherein, when the selected 
authentication mode is an EAP-based authentication mode, the receiving of the 
authentication request message comprises requesting an authentication, authorization, and 
accounting (AAA) server to perform an authentication through an standardized 
authentication protocol of an upper layer. 

36. (Previously Presented) The method of claim 33, wherein, when the selected 
authentication mode is an EAP-based authentication mode, the second response message 
includes an EAP payload, 

wherein the EAP payload includes data for the authentication. 

37. (Previously Presented) The method of claim 33, wherein, when the selected 
authentication mode is a digital certificate based authentication mode, the second response 
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message includes an authentication reply message. 



38. (Previously Presented) The method of claim 33, wherein the second response 
message is a privacy key management response (PKM-RSP) message included in a medium 
access control (MAC) message. 

39. (Currently Amended) An apparatus for performing an authentication on a 
subscriber station in a base station, the apparatus comprising: 

m e an s for r e c e ivin g a message parser configured to receive a first message from the 
subscriber station, the first message including information on at least one authentication 
mode that can be supported by the subscriber station; 

means for ael e ctingan authentication controller configured to select an authentication 
mode that can be performed by the base station among the at least one authentication mode 

. and for tranamittin e an authentication rep l y message generator configured to 
transmit a second message including information on the selected authentication mode to the 
subscriber stationf 

mcano for roceivin e wherein the message parser is further c onfigured to receive an 
authentication request from the subscriber station by receiving a privacy key management 
request (PKM-REQ) message having a message type according to the selected authentication 
modeeand . and 

m e ans for transmittin g wherein the authentication reply message generator is further 
configured to transmit a privacy key management response (PKM-RSP) message having a 
message type according to the selected authentication mode to the subscriber station in 
response to the authentication request. 

40. (Previously Presented) The apparatus of claim 39, wherein, when the selected 
authentication mode is an extensible authentication protocol (EAP) based authentication 
mode, the message type of each of the PKM-REQ message and the PKM-RSP message is an 
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EAP transfer including an EAP payload, 

wherein the EAP payload includes data for the authentication. 

41 . (Previously Presented) A method of negotiating an authentication mode with a 
subscriber station in a base station, the method comprising: 

receiving a subscriber station basic capability negotiation request (SBC-REQ) 
message from the subscriber station, the SBC-REQ message including a parameter 
representing at least one authentication mode that can be supported by the subscriber station; 

selecting an authentication mode that can be performed by the base station among 
the at least one authentication mode; and 

transmitting a subscriber station basic capability negotiation response (SBC-RSP) 
message to the subscriber station, the SBC-RSP including a parameter representing the 
selected authentication mode. 

42. (Previously Presented) The method of claim 41, further comprising: 
receiving a privacy key management request (PKM-REQ) message having a message 

type according to the selected authentication mode; and 

transmitting a privacy key management response (PKM-RSP) message having a 
message type according to the selected authentication mode to the subscriber station in 
response to the PKM-REQ message. 

43. (Previously Presented) The method of claim 42, wherein, when the selected 
authentication mode is an extensible authentication protocol (EAP) based authentication 
mode, the message type of each of the PKM-REQ message and the PKM-RSP message is an 
EAP transfer including an EAP payload, and 

the EAP payload includes data for an authentication. 

44. (Currently Amended) A method of performing an authentication on a subscriber 
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station in a base station, the method comprising: 

s e l e ctin e setting an extensible authentication protocol (EAP) based authentication 
mode as an authentication mode by negotiating with the subscriber station , wherein the EAP 
based authentication mode is selected by the base station from among at least one 
authentication mode that can be supported by the subscriber station ; 

receiving an authentication request by receiving a privacy key management request 
(PKM-REQ) message from the subscriber station, the PKM-REQ message having a message 
type according to the EAP-based authentication mode; and 

transmitting a privacy key management response (PKM-RSP) message to the 
subscriber station in response to the authentication request, the PKM-RSP message having a 
message type according to the EAP based authentication mode. 

45. (Previously Presented) The method of claim 44, wherein the message type of 
each of the PKM-REQ message and the PKM-RSP message is an EAP transfer including an 
EAP payload, and 

the EAP payload includes data for the authentication. 

46. (New) An apparatus for requesting an authentication to a base station in a 
subscriber station, the apparatus comprising: 

an authentication request message generator configured to transmit a first message 
to the base station, the first message including information on at least one authentication 
mode that can be supported by the subscriber station; and 

an authentication reply message parser configured to receive a second message 
from the base station, the second message including information on an authentication 
mode selected by the base station among the at least one authentication mode, 

wherein the authentication request message generator is further configured to 
request an authentication by transmitting a privacy key management request (PKM-REQ) 
message to the base station, the PKM-REQ message having a message type according to 
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the selected authentication mode, and 

wherein the authentication reply message parser is further configured to receive a 
privacy key management response (PKM-RSP) message having a message type according 
to the selected authentication mode from the base station in response to the authentication 
request. 

47. (New) The apparatus of claim 46, wherein, when the selected 
authentication mode is an extensible authentication protocol (EAP) based authentication 
mode, the message type of each of the PK.M-REQ message and the PKM-RSP message is 
an EAP transfer including an EAP payload, and 

wherein the EAP payload includes data for the authentication. 
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